SECURITY ANNOUNCEMENT

CVE-2026-99009

23 October 2026

attaching the DLC. The mark is cleared when an open starts, so a DLC that is reused is not affected. This covers both callers of rfcomm_dlc_open(), the socket and the tty layer.

Introduced

6.6.15782425b14f0fb22e46cfddc56d6465570f5ed0ce6

Fixed releases

6.12.114d2206e8c78be69d21d4f5343c3e99fbaeef41cbb

6.18.58cc7732b8549ecb6f02457edeb8db1f6d255e381c

6.6.1604dc3d5a004b8fd59f3c905631dbb18cb601b1b41

7.2.11f492de11b325446b0b11bc2eb86e1f546eaa61b6

View source announcement ↗